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[Editorial Draft] State in Web application design 

The Web browser is one half of the design of state in a Web application, ... The session 
state may be realized by storing state on the client or on the ... 

www.w3.org/2G01/tag/doc/state.html - 64k - Cached - Slmliar pages 

Archive of W3C News in 2005 

2005-1 1-15: W3C is pleased to announce the launch of the Rich Web Client Activity for 
client-side Web Application development. The Web APIs Working Group ... 

www.w3.org/News/2005 - 1 93k - Cached - Similar pages 
[ More results from wvw.w3.om ] 

Designing Enterprise Applications with the J2EE Platform. Second ... 
Web applications may support only one type of client with a single ... The section 
"Maintaining Client State" in The J2EE Tutorial explains in detail how to ... 

java.sun.com/blueprints/guideiines/designing_enterp rise_applications_2e/web-tier/web- 
tier5.html - 80k - Cached - Similar pages 

* 

Introduction to Web Forms State Management 

View state, control state, hidden fields, cookies, and query strings all involve storing data 
on the client in various ways. However, application state ... 

msdn2.microsoft.com/en -us/75x4ha6s.aspx - 27k - Cached - Sl!nUar..pages 

Microsoft ASP.NET QuickStarts Tutorial 

Using Application State Using Session State Using Client-Side Cookies ... Web server 
(enter iisreset on the command line) and the session state value will ... 

samples.gotdolnet.com/quickstart/aspplus/doc/stateoven/iew.aspx - 27k - 

Cached - .Similar .pages 

Web Client Software Factory Session State StateValue<T> for Unit ... 
Web Client Software Factory Session State StateValue for Unit Testing - Patterns and ... 
When unit testing Application Controller Classes, for example, ... 

www.davidhayden.com/blog/dave/archive/2007/ 
02/24AA/ebClientSoftv/areFactorySessionStateStateValueT.aspx ■ 48k - 

Cached - Similar pages 




Preparation Guide for Exam 70-528: TS: Microsoft .NET Framework ... 
NET Framework 2.0 - Web-based Client Development. ... Manage state of an application 
by using client-based state management options. ... 

wvAV.microsoft.com/learning/exams/70-528.mspx -76k - Mar 25, 2007 - 
Cached - Sln^aLaages 

Client Side State - HTTP Cookies 

The addition of a simple, persistent, client-side state significantly extends the capabilities of 
Web-based client/server applications. ... 

wp.netscape.com/newsref/std/cookie_spec.html - 17k Cached - Simjiar pages 
Building Web Services the REST Way 

The representation places the client application in a state. ... The Web is a REST system! 
Many of those Web services that you have been using these many ... 
www.xfrontxorn'REST-Web-Services.htm! - 18k - Cached - Sjmijar.pacjes 
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How To Handle Web Client Session State in an Application Center 
Application Center 2000 does not replicate client state, including Active Server Pages 
(ASP) session variables, between cluster members. 

support.micfosoftcorn/kb/286279 - Slm!tar.|?ases 
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Maintaining Client State 

Many applications require that a series of requests from a client be associated with one another. For example, 
the Duke's Bookstore application saves the state of a user's shopping cart across requests. Web-based 
applications are responsible for maintaining such state, called a session, because HTTP is stateless. To 
support applications that need to maintain state, Java servlet technology provides an API for managing 
sessions and allows several mechanisms for implementing sessions. 

Accessing a Session 

Sessions are represented by an HfctpSession object. You access a session by calling the getSession 
method of a request object. This method returns the current session associated with this request, or, if the 
request does not have a session, it creates one. 

Associating Objects with a Session 

You can associate object-valued attributes with a session by name. Such attributes are accessible by any web 
component that belongs to the same web context and is handling a request that is part of the same session. 

The Duke's Bookstore application stores a customer's shopping cart as a session attribute. This allows the 
shopping cart to be saved between requests and also allows cooperating servlets to access the cart. 
)^$}:5&$I?^A:.adds items to the cart; deletes items from, and clears the 

cart; and CashierServlet retrieves the total cost of the books in the cart. 

public class CashierServlet extends HttpServlet { 
public void doGet (HttpServletRequest request, 
HttpServletResponse response) 
throws ServletException, IOException * { 

// Get the user's session and shopping cart 
HttpSession session = request . getSession () ; 
ShoppingCart cart = 

(ShoppingCart) session. 
getAttribute ( "cart" ) ; 

// Determine the total price of the user's books 
double total = cart . getTotal ( ) ; 

Notifying Objects That Are Associated with a Session 

Recall that your application can notify web context and session listener objects of servlet life-cycle events 
( Handling Servtet Life-Cycle £ vents ). You can also notify objects of certain events related to their association 
with a session such as the following: 

• When the object is added to or removed from a session. To receive this notification, your object must 
implement the j avax . servlet . ht tp . .Ht tpSea ; aip nSiiidiriqLi3 tener interface . 
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• When the session to which the object is attached will be passivated or activated. A session will be 
passivated or activated when it is moved between virtual machines or saved to and restored from 
persistent storage. To receive this notification, your object must implement the 

Session Management 

Because there is no way for an HTTP client to signal that it no longer needs a session, each session has an 
associated timeout so that its resources can be reclaimed. The timeout period can be accessed by using a 
session's [get I set] Max Inactive Interval methods. You can also set the timeout period in the 
deployment descriptor using NetBeans 5.5: 

1 . Open the web . xml file in the web . xml editor. 

2. Click General at the top of the editor. 

3. Enter an integer value in the Session Timeout field. The integer value represents the number of minutes 
of inactivity that must pass before the session times out. 

To ensure that an active session is not timed out, you should periodically access the session via service 
methods because this resets the session's time-to-live counter. 

When a particular client interaction is finished, you use the session's invalidate method to invalidate a 
session on the server side and remove any session data. The bookstore application's Receipts e rvl et is the 
last servlet to access a client's session, so it has the responsibility to invalidate the session: 

public class ReceiptServlet extends HttpServlet { 
public void doPost (HttpServletRequest request, 
HttpServletResponse response) 
throws ServletException, IOException { 
// Get the user's session and shopping cart 
HttpSession session = request . getSession () ; 
// Payment received — invalidate the session 
session. invalidate ( ) ; 



Session Tracking 

A web container can use several methods to associate a session with a user, all of which involve passing an 
identifier between the client and the server. The identifier can be maintained on the client as a cookie, or the 
web component can include the identifier in every URL that is returned to the client. 

If your application uses session objects, you must ensure that session tracking is enabled by having the 
application rewrite URLs whenever the client turns off cookies. You do this by calling the response's 
encodeURL(URL) method on all URLs returned by a servlet This method includes the session ID in the URL 
only if cookies are disabled; otherwise, it returns the URL unchanged. 

The doGet method of ShowCartServIet encodes the three URLs at the bottom of the shopping cart display 
page as follows: 

out.println("<p>   <p><strong><a href=\"" + 
response . encodeURL ( request . getContextPath ( ) + 
"/bookcatalog") + 

"\">" + messages. getstring ( "ContinueShopping" ) + 
"</a>      " + 
"<a href=\"" + 
response . encodeURL ( request . getContextPath ( ) + 
"/bookcashier") + 

»\">» + messages. getstring ("Checkout") + 
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